CVE-2009-2357

The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2009-07-07

Last modified

2024-08-07

Weaknesses

CWE-16

Affected products

• Tekradius (Yasinkaplan)

References

• http://www.nth-dimension.org.uk/utils/get.php?downloadsid=56
• http://www.securityfocus.com/archive/1/504740/100/0/threaded
• http://www.vupen.com/english/advisories/2009/1816